PAN-OS includes App-ID™, our patented traffic classification technology that automatically discovers and controls new applications, even those that try to evade detection by masquerading as legitimate traffic, hopping ports or sneaking through firewalls under encryption.
PAN-OS includes User-ID™ and Cloud Identity Engine, which simplifies user identification and authentication and helps your staff deploy Zero Trust easily. Cloud Identity Engine also helps aggregate and centralize user information and allows consistent authentication and authorization of users, regardless of location and where user identity stores live – all using a point-and-click configuration and automatically synchronizing identity across identity providers.
Device-ID™, a feature of PAN-OS, provides policy rules for devices regardless of changes to IP address or location. With Device-ID, you gain context for how events relate to devices and device policies. PAN-OS can help improve security, decryption, QoS and authentication policies.
Similar to Device-ID and App-ID, Content-ID™ gives you the power to understand and control the content of traffic moving through your network. Content-ID provides comprehensive threat protection in a single scan of network traffic, optimizing your NGFW performance.
The traditional strategy of simply adding more and more security features results in performance degradation and increased latency. Our single-pass architecture performs all necessary security functions in a single scan, reducing complexity and minimizing total cost of ownership.
Unless inspected, encrypted traffic leaves organizations blind to security risks hidden inside. Hackers take advantage of this lack of visibility to deliver malware within encrypted traffic. PAN-OS provides comprehensive decryption for TLS and SSL encrypted traffic, including TLS 1.3 and HTTP/2.
RETURN ON INVESTMENT
NET PRESENT VALUE
In addition to the latest features in PAN-OS 10.1 you also get access to the innovations introduced in previous releases